ARAT, Astec Risk Assessment Tool, is a web application tool for information risk assessment with a user-friendly interface for simple risk quantification and support for action management

ARAT application facilitates risk assessment and tracking of actions approved by management to reduce the risks to acceptable level, following ISO/IEC 27001:2005 and ISO/IEC 27005 standards.

The application includes built-in, interrelated catalogue of ISO/IEC 27001 standardized asset, threats and vulnerabilities, containing over 400 items that are frequent in information security risk assessments. The built-in relations between catalogue items enable the risk assessor to significantly shorten the risk assessment scope setup time compared to alternative solutions, and start assessing.